39df84d2b9bce4011863c142347bf5b13990aa2ab52239f6cd4f8e9da4af89c6

General

Target
39df84d2b9bce4011863c142347bf5b13990aa2ab52239f6cd4f8e9da4af89c6
Size 243KB
Sample240720-aaf3tsxamp
SHA256 39df84d2b9bce4011863c142347bf5b13990aa2ab52239f6cd4f8e9da4af89c6
MD5 83f881b1df13117244adac9bb779fe50
SHA1 18dde6b0721d95bd9e2251ffb1b1448c7bf1f6fa
SHA512 0d4ac1814fee774f9e6734b5a72f45e6a10f34fd7db2a3145eb8e404baa7c4a6c620a3ba457442bbc4c5577c26053a05fdb7a95e048e28164b0982120539175a
SSDEEP 3072:yltcET6fI1bTSerH0V/daHjUUGjShP43eJGIw0O2pQMeql/+dAh698:MtGfI3T0V/dYUFeh60Fte4/fh69
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39df84d2b9bce4011863c142347bf5b13990aa2ab52239f6cd4f8e9da4af89c6

File Explorer

39df84d2b9bce4011863c142347bf5b13990aa2ab52239f6cd4f8e9da4af89c6

.exe 243KB

39df84d2b9bce4011863c142347bf5b13990aa2ab52239f6cd4f8e9da4af89c6

IMPHASH f89e6f094499d1ea341fa5287a97c4bf
SHA256 39df84d2b9bce4011863c142347bf5b13990aa2ab52239f6cd4f8e9da4af89c6
MD5 83f881b1df13117244adac9bb779fe50
SHA1 18dde6b0721d95bd9e2251ffb1b1448c7bf1f6fa
SHA512 0d4ac1814fee774f9e6734b5a72f45e6a10f34fd7db2a3145eb8e404baa7c4a6c620a3ba457442bbc4c5577c26053a05fdb7a95e048e28164b0982120539175a
SSDEEP 3072:yltcET6fI1bTSerH0V/daHjUUGjShP43eJGIw0O2pQMeql/+dAh698:MtGfI3T0V/dYUFeh60Fte4/fh69
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

20245

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadHugeReadPtr SetEndOfFile LocalCompact CreateHardLinkA GetModuleHandleW GetCurrentThread GetProcessHeap EnumResourceTypesA GlobalAlloc GetSystemDirectoryW LoadLibraryW IsProcessInJob AssignProcessToJobObject IsBadWritePtr GetLastError SetLastError GetProcAddress VerLanguageNameA FindClose LoadLibraryA SetConsoleCtrlHandler AddAtomW CreateEventW HeapWalk GlobalHandle GetModuleFileNameA GetOEMCP GlobalUnWire EnumResourceNamesA PeekConsoleInputA Module32NextW GetDiskFreeSpaceExW CreateFileW SetStdHandle WriteConsoleW SetFilePointer HeapReAlloc IsValidLocale EnumSystemLocalesA WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW IsProcessorFeaturePresent GetACP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId HeapCreate ReadFile UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount ExitProcess GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetUserDefaultLCID GetLocaleInfoA CloseHandle

user32

GetMessageExtraInfo CharUpperBuffA GetCursorPos SetMenu SetCaretPos GetCaretBlinkTime SetClipboardViewer

Sharing

General

Malware Config

Signatures

File Explorer

39df84d2b9bce4011863c142347bf5b13990aa2ab52239f6cd4f8e9da4af89c6

kernel32

user32

generic